Manifest
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
File: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft (raw, json)
Hash identifier: LsdRET3m5fEAFCvQfXEbpCqlbpj5RbjNWbonL/OcPXc=
Subject key identifier: 93:AF:28:9D:55:8A:1E:B8:39:6C:21:C1:E1:56:87:BF:24:E9:76:04
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Certificate issuer: /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial: 1EC67E202CD62198C7DD2C75F9FC76FCFC9CA6CE
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
Manifest number: 04BC
Signing time: Fri 31 Jan 2025 06:10:49 +0000
Manifest this update: Fri 31 Jan 2025 06:05:49 +0000
Manifest next update: Sat 01 Feb 2025 08:19:49 +0000
Files and hashes: 1: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=)
2: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=)
3: 3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl (hash: SE5eSlDKRPVwEMljyzTZ40Jd0IdE80ABBJaZXMNih34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c6:7e:20:2c:d6:21:98:c7:dd:2c:75:f9:fc:76:fc:fc:9c:a6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Validity
Not Before: Jan 31 06:05:49 2025 GMT
Not After : Feb 1 08:19:49 2025 GMT
Subject: CN=93AF289D558A1EB8396C21C1E15687BF24E97604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0d:a1:d9:e6:d8:24:f0:6e:7a:07:ce:49:01:
5b:a9:80:6c:7a:08:72:56:ee:da:bf:50:46:46:2f:
a6:d4:e0:3a:6a:ad:a9:c3:84:b1:6c:e2:91:aa:4a:
a7:f5:3c:34:60:30:d3:e2:bd:72:76:a8:3b:77:72:
a6:6a:6a:bb:25:f4:c0:0c:68:a8:d5:f1:71:09:d1:
80:c6:80:2d:f9:0e:88:fc:21:2f:ec:20:46:65:8f:
41:09:3d:ab:2f:bd:2c:9c:00:d4:f4:cf:b3:58:9f:
bc:9c:4d:2d:60:21:8e:c9:52:79:4a:45:19:a8:55:
bd:4b:e2:c4:36:e8:71:ed:10:2a:7e:e5:34:ec:84:
ad:60:b1:3c:78:12:3a:1d:b0:a8:98:44:50:0c:b9:
80:f0:32:3d:10:f2:06:58:06:c3:c7:13:6c:ee:1a:
9f:58:4c:d5:43:ba:9f:f9:b6:10:af:23:60:9e:5f:
d5:c4:d9:bc:ef:0e:02:00:61:25:df:d0:d4:2e:9e:
2a:b6:3f:8d:8c:c3:be:7f:d7:95:88:7f:2c:10:2d:
d4:b2:fe:81:1b:b5:61:70:4d:7a:1e:de:ae:1c:b4:
27:d0:68:a9:48:34:54:37:e1:cc:4e:59:0d:5d:80:
9d:46:c9:03:bc:32:21:ce:be:00:3d:fd:9d:a6:d5:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:28:9D:55:8A:1E:B8:39:6C:21:C1:E1:56:87:BF:24:E9:76:04
X509v3 Authority Key Identifier:
keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:de:a6:32:69:8f:fe:27:85:c8:20:b9:a6:d1:2c:00:d1:
ec:7b:a2:4e:43:10:db:d9:2f:67:c7:ff:4c:a3:d3:43:be:07:
b6:fc:9a:ce:e6:8f:70:fe:e9:a9:3b:fa:d7:21:3a:35:e5:7f:
68:9e:58:f1:57:33:0e:b7:b2:52:89:2d:93:9b:09:33:14:a1:
cb:b7:ec:1c:c2:4b:bd:04:98:d5:fa:95:88:5b:26:1c:76:da:
ea:cb:b3:40:ed:4e:1a:1e:42:cc:70:e0:f8:70:fa:a3:0a:eb:
88:58:bf:30:73:d1:db:55:fc:4e:31:68:1f:bd:b1:52:d7:ed:
a3:07:cd:48:11:98:f9:18:36:ea:03:22:fe:b7:a1:e2:3f:75:
1f:d4:a4:ba:78:ef:6d:76:b7:0b:61:73:0b:15:9f:82:38:33:
35:65:91:59:b4:91:5d:56:f3:88:0c:14:61:9d:fb:2e:54:ad:
3a:e5:ec:80:79:6a:16:5b:f5:e6:f4:77:1a:1d:ed:f7:b2:a8:
89:56:db:0f:d3:5b:2c:fa:05:2e:61:63:fe:8a:98:eb:83:1e:
c7:50:aa:fc:4c:1c:39:9c:38:4e:27:02:b0:d7:a1:51:eb:42:
4d:aa:cb:2e:6f:01:d5:3e:b5:1a:16:1e:0e:7b:64:43:3f:12:
3d:86:8c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:16:57 2025 by rpki-client